Delta Electronics DIAEnergie Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency. A cross-site...

The Link Between AWM Proxy & the Glupteba Botnet

On December 7, 2021, Google announced it was suing two Russian men allegedly responsible for operating the Glupteba botnet, a global malware menace that has infected millions of computers over the past decade. That same day, AWM Proxy -- a 14-year-old anonymity service that rents hacked PCs to...

Espressif ESP-IDF Memory Corruption Vulnerability

Espressif ESP-IDF is an IoT development framework from China Lexin Information Technology Espressif.A memory corruption vulnerability exists in Espressif ESP-IDF, which stems from not checking the SegN field of the Transaction Start PDU, and can be exploited by an attacker during configuration to...

CVE-2022-33005

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

CVE-2022-33005

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

Cross site scripting

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

PT-2022-21640

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie version 1.08.00 Description A cross-site scripting XSS issue in the System Settings/IOT Settings module allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

CVE-2022-33005: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

Securing your IoT with Edge Secured-core devices

A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...

Securing your IoT with Edge Secured-core devices

A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...

Feds Dismantle Russian Rsocks Botnet Powered by Millions of IoT Devices

By Deeba Ahmed The hackers behind Rsocks botnet used the hacked IoT devices as proxy servers where its customers would pay… This is a post from HackRead.com Read the original post: Feds Dismantle Russian Rsocks Botnet Powered by Millions of IoT Devices...

Malicious code in nodejs-docs-samples-iot-mqtt-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a02c1e75441fabe4bcc6557ef33ce2bba5bdb671f2147161ddf0d05a90809ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4903 Malicious code in nodejs-docs-samples-iot-mqtt-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a02c1e75441fabe4bcc6557ef33ce2bba5bdb671f2147161ddf0d05a90809ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1199 Malicious code in aws-iot-greengrass-accelerators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12fb992832ab6f19a89aff974cd7a31a75944f387d6c3ca8c8d26e1507f2bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-iot-modelsrepository (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250263aebfc93875e0f4708687b14d5cfe78f1300e66ec9da664d3146925f609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1336 Malicious code in azure-iot-device-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 092a7f8fff3a4ffff2843f5123ed1648065db564827c61a0229ded806ee28c3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1339 Malicious code in azure-iot-modelsrepository (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250263aebfc93875e0f4708687b14d5cfe78f1300e66ec9da664d3146925f609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2054ba3bbed2d19afe559eb23210cfaa9a28260235af1d953cbc978f05011643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-update-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a41aebeb765add539c5812a2506d600623e9f369a15da042b5c98e31a421c04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3943 Malicious code in iot-modelsrepository (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e83d4636b2fb99e3bafa73ad6a6798b54de9c09cbdea7b6d0626991a4554539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...